Amendments to the Claims 

1. (Currently amended) A framework for controlling access rights to digital content in a 
distributed information system comprising: 

first storage means for storing a reference to a user registered in said framework; 
second storage means for storing a reference to digital content registered for said user; 

and 

third storage means for storing a reference to a digital secure repository registered for 
said user, the digital secure repository containing storage means for storing a unique identifier 
and a reference to said digital content, said digital secure repository being associated with said 
user independently of a particular user device and storing access rights to said digital content 
granted to said user by a provider and a list of authorized rendering devices on which said user is 
allowed to render said digital content, said digital content being stored outside of said digital 
secure repository on a storage device accessible to a user, said digital secure repository being 
accessible to said user independently of said provider so as to allow said user to render said 
digital content on an authorized rendering device in accordance with the access rights stored in 
said digital secure repository without requiring additional authorization from an external 
authority. 

2. (Previously presented) The tiramework according to claim 1, further comprising: 
fourth storage means for storing a reference to an authorized rendering device registered 

for said user. 

3. (Original) The fi-amework according to claim 1 , further comprising: 

a communication link for establishing communication to one or more of the set of said 
secure repository and said rendering device. 

4. (Original) The fi-amework according to claim 1 , wherein said secure repository further 
comprises storage means for storing a digital key for decrypting said digital content. 

5. (Previously presented) The framework according to claim 1, wherein said secure 
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repository further comprises storage means for storing said list of authorized rendering devices. 

6. (Cancelled) 

7. (Original) The framework aeeording to claim 1, wherein said secure repository further 
comprises storage means for storing a reference to said user. 

8. (Previously presented) The framework according to claim 1, wherein said secure 
repository further comprises a communication link for establishing communication to one or 
more of the set of said framework and an authorized rendering device. 

9. (Original) The framework aeeording to claim 1 , wherein the framework is realized as a 
set of web applications forming an Internet web site. 

1 0. (Original) An Internet web site offering a framework for controlling access rights to 
digital content in a distributed information system according to claim 1 . 

1 1 . {Currently amended) A method for controlling access rights to digital content in a 
distributed information system comprising the steps of: 

registering a user with a framework for controlling access rights to digital content in said 
distributed information system; 

registering a digital secure repository for said user, said digital secure repository being 
associated with said user independently of a particular user device, said digital secure repository 
storing access rights to said digital content granted to said user by a provider and a list of 
authorized rendering devices on which said user is allowed to render said digital content, said 
digital secure repository being accessible to said user independently of said provider; 

registering digital content for said user, said digital content being stored outside of said 
digital secure repository on a storage device accessible to a user; and 

controlling the rendering of said digital content in accordance with the access rights to 
said digital content and the list of authorized rendering devices stored in said digital secure 
repository so as to allow said user to render said digital content on an authorized rendering 
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device in accordance with the access rights stored in said digital secure repository without 
requiring additional authorization from an external authority, 

12. (Original) The method according to claim 1 1, wherein registering a user further 
comprises the steps of: 

receiving a message from said user comprising a reference to said digital secure 
repository; 

validating said reference to said digital secure repository; and 
storing a reference to said user. 

13. (Previously presented) The method according to claim 1 1, wherein registering a digital 
secure repository further comprises the steps of: 

receiving a message from said user comprising credentials of the user; 
validating said credentials; and 

if the credentials are valid, issuing a new digital secure repository, storing a reference to 
said issued digital secure repository, and sending it to the user. 

14. (Previously presented) The method according to claim 11, wherein registering digital 
content frirther comprises the steps of: 

receiving a message from said user comprising an order request and a reference to the 
digital secure repository registered for said user; 
validating said reference; and 
if the reference is valid: 

perlbrming purchase formalities; and 
if all formalities are performed: 

encrypting a document encryption key associated with the requested 
digital content with a public key associated with said digital secure repository; 
returning the encrypted document encryption key to the user; and 
registering the purchased digital content for said user. 
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1 5. (Previously presented) The method according to claim 1 1 , further comprising the step of 
registering an authorized rendering device for said user. 

1 6. (Original) The method according to claim 1 5, wherein registering a rendering device 
further comprises the steps of: 

receiving a message from said user comprising credentials of the user and a reference to 
said rendering device to be registered; 
validating said credentials; 

if the credentials are valid, storing the reference of the rendering device associated with 
said user. 

1 7. (Original) A computer program product stored on a computer usable medium, comprising 
computer readable program means for causing a computer to perform a method according to 
claim 1 1 . 

1 8. (Currently amended) A method for rendering digital content on a rendering device 
comprising the steps of: 

receiving a request for rendering digital content in a predetermined form; 

reading information about access rights to said digital content from a digital secure 
repository, said digital secure repository being associated with a user independently of a 
particular user device, said digital secure repository storing access rights to said digital content 
granted to said user by a provider and a list of authorized rendering devices on which said user is 
allowed to render said digital content, said digital secure repository being accessible to said user 
independently of said provider, said digital content being stored outside of said digital secure 
repository on a storage device accessible to a user; and 

if the stored access rights cover the requested form of rendering the digital content and 
the rendering device is on the stored list of authorized rendering devices: 

getting a document encryption key encrypted with a public key associated with 

said rendering device; 

decrypting the document encryption key with a private key associated with said 

rendering device; 
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decrypting said digital content with said document encryption key; and 
rendering said digital content in the requested tbnn so as to allow said user to 
render said digital content on an authorized rendering device in accordance with the 
access rights stored in said digital secure repository without requiring additional 
authorization from an external authority. 

1 9. (Original) The method for rendering digital content on a rendering device according to 
claim 18, wherein the step of getting a document encryption key further comprises the steps: 

determining from a storage device associated with said rendering device whether or not 
the digital content is bound to said rendering device and if yes receiving said document 
encryption key from said storage device. 

20. (Original) The method for rendering digital content on a rendering device acctirding to 
claim 18, wherein the step of getting a document encryption key further comprises the step of 
receiving said document encryption key from a digital secure repository, 

21 . (Original) The method for rendering digital content on a rendering device according to 
claim 1 8, wherein the step of reading from a digital secure repository further comprises the step 
of communicating with said digital secure repository over a communication link. 

22. (Original) The method for rendering digital content on a rendering device according to 
claim 1 8, wherein the step of reading from a digital secure repository fijrther comprises the step 
of retrieving said digital secure repository from a storage device also keeping said digital 
content. 

23. (Original) The method tor rendering digital content on a rendering device according to 
claim 1 8, wherein the step of decrypting said digital content further comprises the step of 
retrieving said digital content from a storage device. 

24. (Original) The method for rendering digital content on a rendering device according to 
claim 1 8, wherein the step of decrypting said digital content further comprises the step of 
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retrieving said digital content from over a communication link as downloaded or streaming data. 

25. (Original) A computer program product stored on a computer usable medium, comprising 
computer readable program means for causing a computer to perfonn a method according to 
claim 1 8. 

26. (Currently amended) A method for binding digital content to a rendering device, the 
method comprising the following steps: 

establishing a connection from said rendering device to a digital secure repository, said 
digital secure repository being associated with a user independently of a particular user device 
and storing access rights to said digital content granted to said user by a provider and a list of 
authorized rendering devices on which said user is allowed to render said digital content, said 
digital secure repository being accessible to said user independently of said provider so as to 
allow said user to render said digital content on an authorized rendering device in accordance 
with the access rights stored in said digital secure repository without requiring additional 
authorization from an external authority, said digital content being stored outside of said digital 
secure repository on a storage device accessible to a user; 

requesting from said digital secure repository access rights for specified digital content; 

and 

if binding is allowed according to the access rights stored in said digital secure 
repository, receiving a respective document encryption key encrypted with a public key 
associated with the rendering device and storing the encrypted key for later decrypting the 
respective digital content. 

27. (Original) A computer prograin product stored on a computer usable medium, comprising 
computer readable program means for causing a computer to perform a method according to 
claim 26. 

28. (Currently amended) A method for storing digital content from a rendering device onto a 
storage device, the method comprising the following steps: 
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establishing a connection trom said rendering device to a digital secure repository, said 
digital secure repository being associated with a user independently of a particular user device, 
said digital secure repository storing access rights to said digital content granted to said user by a 
provider and a list of authorized rendering devices on which said user is allowed to render said 
digital content, said digital secure repository being accessible to said user independently of said 
provider so as to allow said user to render said digital content on an authorized rendering device 
in accordance with the access rights stored in said digital secure repository without requiring 
additional authorization from an external authority, said digital content being stored outside of 
said digital secure repository on a storage device aeeessible to a user; 

requesting from said digital secure repository access rights for specified digital content; 

and 

if storing is allowed according to the access rights stored in said digital secure repository, 
receiving respective document encryption keys encrypted with respective public keys of all 
rendering devices registered in said digital secure repository and storing the encrypted keys 
together with encrypted digital content on said storage device, 

29. (Original) A computer program product stored on a computer usable medium, comprising 
computer readable program means for causing a computer to perform a method according to 
claim 28. 

30. (Currently amended) A method of controlling the rendering of digital content to which a 
user has been granted access rights by a provider, comprising the steps of: 

storing said aeeess rights to said digital content in a digital secure repository that is 
associated with said user independently of a particular user device and accessible to said user 
independently of said provider; 

storing said digital content outside of said digital secure repository on a storage device 
accessible to a user; 

storing in said digital secure repository a list of authorized rendering devices on which 
said user is allowed to render said digital content; and 

controlling the rendering of said digital content on a rendering device in accordance with 
the access rights to said digital content and the list of authorized rendering devices stored in said 
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digital secure repository so as to allow said user to render said digital content on an authorized 
rendering device in accordance with the access rights stored in said digital secure repository 
without requiring additional authorization from an external authority. 

3 1 . (Previously presented) A computer program product stored on a computer usable 
medium, comprising computer readable program means for causing a computer to perform a 
method according to claim 30. 
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